From bf185b71a9f3a0e46f84dd17d266dbb6f5814f44 Mon Sep 17 00:00:00 2001
From: Nikholas Pcenicni <82239765+nikpcenicni@users.noreply.github.com>
Date: Sat, 28 Mar 2026 02:50:23 -0400
Subject: [PATCH] Enhance Kyverno's performance by increasing Kubernetes client
 QPS and burst limits in values.yaml to prevent rate limiting issues under
 load. This adjustment aims to improve the stability of the Kyverno health
 lease during high API/etcd usage.

---
 clusters/noble/apps/kyverno/values.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/clusters/noble/apps/kyverno/values.yaml b/clusters/noble/apps/kyverno/values.yaml
index 819f2cb..45df72c 100644
--- a/clusters/noble/apps/kyverno/values.yaml
+++ b/clusters/noble/apps/kyverno/values.yaml
@@ -8,3 +8,10 @@
 #
 # Baseline Pod Security policies (separate chart): see policies-values.yaml + README.md
 #
+# Raise Kubernetes client QPS/burst so under API/etcd load Kyverno does not hit
+# "client rate limiter Wait" / flaky kyverno-health lease (defaults are very low).
+admissionController:
+  container:
+    extraArgs:
+      clientRateLimitQPS: 30
+      clientRateLimitBurst: 60